Red Hat Openshift Update Service EUVD-2025-209304

CVSS score of 6.4 reflects moderate severity with specific contextual constraints: the CVSS vector (AV:L/AC:H/PR:H) indicates local attack vector, high complexity, and high privilege requirements, making opportunistic exploitation unlikely in typical deployments. However, the risk assessment must account for container deployment contexts where multiple pods or processes may execute with varying privilege levels within the same container namespace. The high complexity (AC:H) and requirement for high privileges (PR:H) suggest this is not a trivial exploit path in standard hardened container environments. EPSS data and CISA KEV status were not provided, so exploitation likelihood in the wild cannot be confirmed; the absence of public exploit code and active exploitation reports suggests this remains a low-profile vulnerability. Risk is primarily relevant to organizations running affected OSUS versions in multi-tenant or mixed-privilege container environments where internal lateral movement is a concern.

An attacker with legitimate access to execute commands within an affected OSUS container (for example, as a limited service account or through a separate vulnerability in a containerized application) discovers they hold membership in the root group. The attacker writes a new entry to the group-writable /etc/passwd file, creating a user with UID 0 and spawning a shell with root privileges, gaining full control of the container and potentially pivoting to the host system. The high complexity requirement (AC:H) may require specific container configuration, namespace setup, or prior knowledge of group assignments, limiting casual exploitation.